Re: net.inet.tcp.tso=0

2015-03-16 Thread el kalin
yea… that's what thought… i did read all the man pages i could find on any bsd for the ipf tools and none mentions anything about being able to block more than one range at a time - like macros or lists or tables, etc. according to ipdeny.com china has about 5300 of those… i can put all of

NPF syntax

2015-03-16 Thread D'Arcy J.M. Cain
I have decided to give up on pf after banging my head against the wall (and the OBSD mailing list) and try npf but I can't figure out the syntax. I followed the example at http://www.netbsd.org/~rmind/npf/ but I keep getting errors when I validate. I reduced npf.conf to the following two lines:

Re: /proc inodes filling up in 1 week

2015-03-16 Thread Manuel Bouyer
On Sun, Mar 15, 2015 at 11:51:29PM -0500, qabulin wrote: Has anyone seen issues with /proc inodes filling up or have suggestions? I have a NetBSD 6.1.5 AMD64 VM (built from remote cross-complie) running for about 6 days when I randomly checked on it today and found that the inodes had

Re: NPF syntax

2015-03-16 Thread Andy Ruhl
On Mon, Mar 16, 2015 at 6:52 AM, D'Arcy J.M. Cain da...@netbsd.org wrote: I have decided to give up on pf after banging my head against the wall (and the OBSD mailing list) and try npf but I can't figure out the syntax. I followed the example at http://www.netbsd.org/~rmind/npf/ but I keep

Re: NPF syntax

2015-03-16 Thread rudolf
D'Arcy J.M. Cain wrote: [...] table friends type tree file /VEX/general/pf/friends.list table enemies type tree file /VEX/general/pf/enemies.list This gives me this error: # npfctl validate npfctl: table '0' is already defined If I remove one line I get this: # npfctl validate table 0 type

Re: /proc inodes filling up in 1 week

2015-03-16 Thread qab
On Mar 16, 2015 12:46 PM, Robert Elz k...@munnari.oz.au wrote: Date:Mon, 16 Mar 2015 16:43:57 +0100 From:Manuel Bouyer bou...@antioche.eu.org Message-ID: 20150316154357.ga9...@asim.lip6.fr | /proc is a pseudo filesystem, I'm not sure the iAvail number is |

Re: NPF syntax

2015-03-16 Thread D'Arcy J.M. Cain
On Mon, 16 Mar 2015 18:26:58 GMT Gerard Lally lists+netbsd.us...@netmail.ie wrote: At date and time Mon, 16 Mar 2015 09:52:07 -0400, D'Arcy J.M. Cain wrote: # npfctl validate /etc/npf.conf:11:3: syntax error near 'alg' I am using the example config almost verbatim except for the table